
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
@adorsys-gis/message-pickup
Advanced tools
A library for implementing services to support the retrieval of messages from DIDComm agents via mediators.
A library for implementing services to support the retrieval of messages from DIDComm agents via mediators.
Protocol | Description | Status |
---|---|---|
DIDComm Message Pickup | Pick up messages from mediators. | ✅ Implemented |
To install the library, run the following command:
npm install @adorsys-gis/message-pickup
Before using the library, you'll need a DID address for the sending party. This can be created using the DIDIdentityService
from the peer library @adorsys-gis/multiple-did-identities
. Here's an example of generating a DID using that library:
export const generateIdentity = async (secretPinNumber: number) => {
const createEvent = waitForEvent(DidEventChannel.CreateDidIdentity);
didIdentityService.createDidIdentity(
DIDMethodName.Peer,
secretPinNumber,
PeerGenerationMethod.Method2,
);
const data = (await createEvent) as ServiceResponse<{ did: string }>;
return data.payload.did;
};
MessagePickupService
The MessagePickupService
is designed to work seamlessly with an event bus architecture. Here's how to pick up messages from a mediator:
import { MessagePickupService } from '@adorsys-gis/message-pickup';
import { MessagePickupEvent } from '@adorsys-gis/message-pickup';
const messagePickupService = new MessagePickupService(
eventBus,
secretPinNumber,
);
// Listen on the MessagePickupEvent.MessagePickup event
const channel = waitForEvent(MessagePickupEvent.MessagePickup);
await messagePickupService.ReceiveMessages(mediatorDid, aliceDid);
// Wait for an acknowledgement on MessagePickupEvent.MessagePickup
const eventData = await channel;
console.log('Received event data:', eventData);
MessagePickup
Class DirectlyIf your application does not use an event bus, you can interact directly with the MessagePickup
class:
import { MessagePickup } from '@adorsys-gis/message-pickup';
const messagePickup = new MessagePickup(
didRepository,
secretPinNumber,
messageRepository,
);
const messageCount = await messagePickup.processStatusRequest(
mediatorDid,
aliceDidForMediator,
);
console.log('Message count:', messageCount);
For more examples and detailed scenarios, consider referring to the test cases in the project.
Contributions are welcome! Please feel free to submit a pull request or open an issue for any enhancements or bug fixes. For contribution guidelines, please refer to the CONTRIBUTING.md file.
This project is licensed under the MIT License - see the LICENSE file for details.
FAQs
A library for implementing services to support the retrieval of messages from DIDComm agents via mediators.
The npm package @adorsys-gis/message-pickup receives a total of 3 weekly downloads. As such, @adorsys-gis/message-pickup popularity was classified as not popular.
We found that @adorsys-gis/message-pickup demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.